Cryptographic protocols should be formally verified
How do we do it in Lean, the fastest-growing proof assistant?
Introducing VCVio (https://t.co/j51Xh0vVU3), a base layer for crypto proofs in Lean
Joint work with @dtumad, @alexanderlhicks, James Waters & Nick Hopper
🧵/n
Our newest sum-check optimizations are out! https://t.co/A50h9UbhGd
We propose a *better* domain for sum-check: the infinity hypercube.
Evaluations over this domain give *precisely* the monomial coefficients, and lead to a ~10% prover speedup over 128+ bits prime fields
🧵/ n
Incredibly excited for @LayerZero_Core to have chosen Jolt as the zkVM powering their new chain, Zero.
THE UNBRIDLED GREATNESS OF SUMCHECK WILL ENDURE FOR A MILLION YEARS
1/ New survey: Sum-check is all you need.
Just posted a survey on the design principles behind Jolt and fast-prover SNARKs more broadly. It's arguably the first time the core ideas have all been written down in one place.
1/ LayerZero is launching a new blockchain and on the SNARK-proving front it's powered by Jolt.
Benchmark we’re proud of: ~1.6 billion 64-bit RISC-V cycles proved/sec on 64 GPUs, with plenty of room for more speedups.
https://t.co/bi7cDBB8rn
Layer Zero, the leading blockchain bridge and interop network, has announced their new L1 — Zero. It combines four technical breakthroughs to create exceptional performance and interoperability.
And it uses a16z crypto's zkVM Jolt at its core.
Really excited to present with @adr1anh tomorrow about our new efficient, uniform STARK protocol that we developed with @UHaboeck. Would love to see you there!
Join @adr1anh and @andrewmilson at zkSummit to explore their novel approach to FRI low degree testing. Their work introduces a multi-domain polynomial commitment scheme that maintains uniform verification while allowing flexible reduction steps.
May 12th in Toronto: https://t.co/5LAI0oIfLF
I'm very proud of the work the ZeroSync team and I did to achieve the Bitcoin Headers Chain Proof but with this decision I've taken a step back from the project and wish the team all the best for the future 💪
Really pleased to share I've joined StarkWare last week. I feel honoured to join a team that I've admired for so long - both for their technical excellence and character.
@cmpeq I think the original code is working as intended. The reason for the discrepancies you saw was a result of the field elements needing to be in Montgomery representation - this should have been better documented in the codebase. I'll make to add this to remove confusion in future.
Can't wait to present at the StarkNet Summit this Thursday!
I'll be discussing the process of reverse engineering StarkWare's verifier and what the future holds for Sandstorm.
Hope to see some of you there #StarknetSummit23
As promised, we are about to open-source the powerful STARK Prover, named Stone!
Taking a major step towards open-sourcing and decentralization!
Next week, during Starknet Summit, we will have an intro session to the prover’s code.